EU AI Act high-risk obligations
Annex III high-risk: HR, credit scoring, healthcare triage, education. Conformity assessment, CE marking, EU database registration, authorised representative for non-EU providers.
Read briefKVKK guidance, regulatory changes, market signals — short briefs from our internal tracker, surfaced for buyers and counsel.
| KVKK | EU AI Act | |
|---|---|---|
| Governs | Personal data | AI systems |
| Instrument | Law No. 6698 | Regulation (EU) 2024/1689 |
| Applies to | Anyone processing personal data of people in Türkiye | Providers & deployers of AI in the EU market |
| Approach | Lawful basis + data-subject rights | Risk tiers: unacceptable / high / limited / minimal |
| Authority | KVK Kurumu (kvkk.gov.tr) | EU AI Office + national authorities |
| Status | In force | Phasing in 2025–2027 |
Annex III high-risk: HR, credit scoring, healthcare triage, education. Conformity assessment, CE marking, EU database registration, authorised representative for non-EU providers.
Read briefChairman publicly disclosed enforcement statistics; the 2026 administrative fine revaluation pushes the maximum single fine to 17.09M TRY.
Read briefDetailed guidance on consent, transparency, automated decision-making and data minimization for generative AI systems processing personal data.
Read briefMandatory documentation: legal basis, transparency, DPIA, human-in-the-loop, model card, data minimization for any GenAI processing personal data.
Read briefDraft AI law introduces risk classification, registration of high-risk AI systems and a new oversight authority. Currently in committee.
Read briefSCCs are now the primary mechanism for cross-border transfers; 5-business-day notification to KVKK required after SCC execution.
Read briefThese are summaries, not legal advice. For KVKK-specific questions write to dpo@clastrum.com.